Re: [pfSense] Why no dnssec in dnsmasq by default?

2015-08-26 Thread Adrian Zaugg
On 24.08.15 20:35, Chris Buechler wrote: > On Sun, Aug 23, 2015 at 9:28 AM, Adrian Zaugg wrote: >> why it is not enabled by default? ... and because all the DNS servers used as forwarders must support DNSSEC too for it work. And thank you for your answer, Chris. Regards, Adrian. ___

Re: [pfSense] Why no dnssec in dnsmasq by default?

2015-08-24 Thread A Mohan Rao
Okey sorry for that but if u have any solution for my question pls post. Thanks On Aug 25, 2015 12:55 AM, "David Burgess" wrote: > On Mon, Aug 24, 2015 at 1:19 PM, A Mohan Rao wrote: > > Chris SIR, > > I m using squid and squid guard its working good but some important > sites r > > not opening

Re: [pfSense] Why no dnssec in dnsmasq by default?

2015-08-24 Thread David Burgess
On Mon, Aug 24, 2015 at 1:19 PM, A Mohan Rao wrote: > Chris SIR, > I m using squid and squid guard its working good but some important sites r > not opening given message ip-addr target group i also make rule for that > still have same issue. Also add to whitelist. > If i m use internet without pf

Re: [pfSense] Why no dnssec in dnsmasq by default?

2015-08-24 Thread A Mohan Rao
Chris SIR, I m using squid and squid guard its working good but some important sites r not opening given message ip-addr target group i also make rule for that still have same issue. Also add to whitelist. If i m use internet without pfSense its open properly. Pls give any idea.. On Aug 25, 2015 12

Re: [pfSense] Why no dnssec in dnsmasq by default?

2015-08-24 Thread Chris Buechler
On Sun, Aug 23, 2015 at 9:28 AM, Adrian Zaugg wrote: > > Adding the three lines > > dnssec > dnssec-check-unsigned > > trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 > > to dnsmasq in pfSense makes dnsmasq dnsssec aware. Is there

[pfSense] Why no dnssec in dnsmasq by default?

2015-08-23 Thread Adrian Zaugg
Adding the three lines dnssec dnssec-check-unsigned trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 to dnsmasq in pfSense makes dnsmasq dnsssec aware. Is there a reason why there is no tickable box to enable this in the GUI or wh